Black Box LRA005A-R2 - Manual (Page 107)

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL
107
Configuration
As part of setting the authentication method to SecurID, a successful authentication of a client must take
place between the Router and the ACE server. Therefore, a fully operable ACE server must be available
and correctly configured for use with the Router before configuring the Router to use SecurID. To
accomplish this refer to the following instructions below. Note that the most current information will be
with your ACE server software package.
1. Set up the ACE server following the instructions supplied by Security Dynamics. If you are already
running the ACE server, add the Router to the list of clients by running sdadmin and choosing item
Clients, and then item Create Client. Type the name of the Router and specify its type as Comm
Server.
2. At the ACE server, either activate users who will log onto the Router as direct users, or activate a
group of users. To activate a user, from the main menu choose item Clients, and then choose item
Activate Direct Users. Now type the name of the Router, and then enter the Serial Number or User
Name information as requested. Refer to the ACE server documentation for more information about
using groups.
3. Using ftp, copy the file /var/ace/sdconf.rec from the ACE server to the Router.
From the ACE server, log into the Router as root. Be sure to use binary mode for the transfer.
% cd /var/ace
% ftp Router
Name: root
Password: root_password
> bin
> put sdconf.rec
> quit
On the Router, verify that the file sdconf.rec resides at the top level of the directory hierarchy.
4. Have your SecurID card available, with it already configured for use with this Router at the ACE
server.
5. To verify that the Router can communicate with the ACE server. On the Router, enter:
ping hostname
where hostname is the name of the ACE server.
6. On the Router, enter:
config modify
Eventually you will be asked to select an authentication method. Select SecurID. At the end of the
config session (after you have been asked whether you want to save this configuration), you will be
prompted to enter your username and passcode.
If the ACE server authenticates you, the authentication method is now set to SecurID. If the ACE
server fails to authenticate you, you will be given the option to try again or give up (authentication
method stays unchanged).